thunderbird-78.9.1-1.0.1.AXS4

エラータID: AXSA:2021-1692:07

Release date: 
Tuesday, April 20, 2021 - 06:06
Subject: 
thunderbird-78.9.1-1.0.1.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 78.9.1.

Security Fix(es):

* Mozilla: An attacker may use Thunderbird's OpenPGP key refresh mechanism to
poison an existing key (CVE-2021-23991)
* Mozilla: A crafted OpenPGP key with an invalid user ID could be used to
confuse the user (CVE-2021-23992)
* Mozilla: Inability to send encrypted OpenPGP email after importing a crafted
OpenPGP key (CVE-2021-23993)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2021-23991
** RESERVED ** This candidate has been reserved by an organization or individual
that will use it when announcing a new security problem. When the candidate has
been publicized, the details for this candidate will be provided.
CVE-2021-23992
** RESERVED ** This candidate has been reserved by an organization or individual
that will use it when announcing a new security problem. When the candidate has
been publicized, the details for this candidate will be provided.
CVE-2021-23993
** RESERVED ** This candidate has been reserved by an organization or individual
that will use it when announcing a new security problem. When the candidate has
been publicized, the details for this candidate will be provided.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. thunderbird-78.9.1-1.0.1.AXS4.src.rpm
    MD5: 1a536ec6a652622b4c06cdbe30faa591
    SHA-256: 122b99b6c70cb891bd443301b15802d27d09e28349d2b1093e9a5e245edc3204
    Size: 708.34 MB

Asianux Server 4 for x86
  1. thunderbird-78.9.1-1.0.1.AXS4.i686.rpm
    MD5: 1808d1b2a1ce606d623efe7b460557b0
    SHA-256: f66b6101f523f32c7a7c0e847d697cf6b82e13db03216c6d3ef35cd5ba9a92a6
    Size: 122.15 MB

Asianux Server 4 for x86_64
  1. thunderbird-78.9.1-1.0.1.AXS4.x86_64.rpm
    MD5: 0ab074dd8d6a00b5ddc610bb9bcf3f55
    SHA-256: d7c87841286dc5f8385d038fbc1d9b460df2af5cff882dfd1a381a0c7497ab83
    Size: 118.30 MB